This is why it is not recommended to click on links in emails to sign into online accounts. The recommended thing to do is to go directly to https://squareup.com/ and sign-in from there instead.
A Sample of a "Square, Inc Refund" Phishing Scam
Subject: Square has refunded your customer
From: squareadmin@jamesken.serverdata.net
Hello,
The $519.00 refund you requested has been processed and should be reflected on your customer's statement in two to seven business days. Please note that business days do not include weekends or bank holidays.
If you sent a receipt to your customer, you can send them a refund receipt at any time from your in-app activity or Square Dashboard:
From in-app Activity:
1. Tap Activity.
2. Locate and tap the payment > New Receipt.
From Square Dashboard:
1. Visit Transactions.
2. Use the date selector tool to locate a specific payment.
3. Click on the payment > Send Receipt.
VIEW THE REFUND
Thanks,
The Square Team
Square customers or users who have already been tricked by the phishing scam are asked to change their passwords and contact Square immediately for help.